viewforum.php 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * These files are a complete rework of the forum. The database structure is
  5. * based on phpBB but all the code is rewritten. A lot of new functionalities
  6. * are added:
  7. * - forum categories and forums can be sorted up or down, locked or made invisible
  8. * - consistent and integrated forum administration
  9. * - forum options: are students allowed to edit their post?
  10. * moderation of posts (approval)
  11. * reply only forums (students cannot create new threads)
  12. * multiple forums per group
  13. * - sticky messages
  14. * - new view option: nested view
  15. * - quoting a message
  16. *
  17. * @Author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  18. * @Copyright Ghent University
  19. * @Copyright Patrick Cool
  20. *
  21. * @package chamilo.forum
  22. */
  23. use \ChamiloSession as Session;
  24. // Language files that need to be included.
  25. $language_file = array('forum', 'group');
  26. // Including the global initialization file.
  27. //require_once '../inc/global.inc.php';
  28. $current_course_tool = TOOL_FORUM;
  29. // Notification for unauthorized people.
  30. api_protect_course_script(true);
  31. // The section (tabs).
  32. $this_section = SECTION_COURSES;
  33. $nameTools = get_lang('ToolForum');
  34. // Are we in a lp ?
  35. $origin = '';
  36. $origin_string = '';
  37. if (isset($_GET['origin'])) {
  38. $origin = Security::remove_XSS($_GET['origin']);
  39. $origin_string = '&amp;origin='.$origin;
  40. }
  41. /* Including necessary files */
  42. require 'forumconfig.inc.php';
  43. require_once 'forumfunction.inc.php';
  44. $userid = api_get_user_id();
  45. /* MAIN DISPLAY SECTION */
  46. $groupId = api_get_group_id();
  47. $my_forum = isset($_GET['forum']) ? $_GET['forum'] : '';
  48. // Note: This has to be validated that it is an existing forum.
  49. $current_forum = get_forum_information($my_forum);
  50. if (empty($current_forum)) {
  51. api_not_allowed();
  52. }
  53. $current_forum_category = get_forumcategory_information($current_forum['forum_category']);
  54. $is_group_tutor = false;
  55. if (!empty($groupId)) {
  56. //Group info & group category info
  57. $group_properties = GroupManager::get_group_properties($groupId);
  58. //User has access in the group?
  59. $user_has_access_in_group = GroupManager::user_has_access($userid, $groupId, GroupManager::GROUP_TOOL_FORUM);
  60. $is_group_tutor = GroupManager::is_tutor_of_group(api_get_user_id(), $groupId);
  61. //Course
  62. if (!api_is_allowed_to_edit(false, true) AND //is a student
  63. (($current_forum_category && $current_forum_category['visibility'] == 0) OR
  64. $current_forum['visibility'] == 0 OR !$user_has_access_in_group)
  65. ) {
  66. api_not_allowed();
  67. }
  68. } else {
  69. //Course
  70. if (!api_is_allowed_to_edit(false, true) AND //is a student
  71. (($current_forum_category && $current_forum_category['visibility'] == 0) OR
  72. $current_forum['visibility'] == 0
  73. ) //forum category or forum visibility is false
  74. ) {
  75. api_not_allowed();
  76. }
  77. }
  78. /* Header and Breadcrumbs */
  79. $my_search = isset($_GET['search']) ? $_GET['search'] : '';
  80. $my_action = isset($_GET['action']) ? $_GET['action'] : '';
  81. $gradebook = null;
  82. if (isset($_SESSION['gradebook'])){
  83. $gradebook = $_SESSION['gradebook'];
  84. }
  85. if (!empty($gradebook) && $gradebook == 'view') {
  86. $interbreadcrumb[] = array (
  87. 'url' => '../gradebook/'.$_SESSION['gradebook_dest'],
  88. 'name' => get_lang('ToolGradebook')
  89. );
  90. }
  91. if (!empty($_GET['gidReq'])) {
  92. $toolgroup = Database::escape_string($_GET['gidReq']);
  93. Session::write('toolgroup',$toolgroup);
  94. }
  95. $forumUrl = api_get_path(WEB_CODE_PATH).'forum/';
  96. if ($origin == 'group') {
  97. $interbreadcrumb[] = array('url' => api_get_path(WEB_CODE_PATH).'group/group.php', 'name' => get_lang('Groups'));
  98. $interbreadcrumb[] = array('url' => api_get_path(WEB_CODE_PATH).'group/group_space.php?'.api_get_cidreq(), 'name'=> get_lang('GroupSpace').' '.$group_properties['name']);
  99. $interbreadcrumb[] = array('url' => '#', 'name' => get_lang('Forum').' '.Security::remove_XSS($current_forum['forum_title']));
  100. } else {
  101. $interbreadcrumb[] = array('url' => $forumUrl.'index.php?search='.Security::remove_XSS($my_search), 'name' => get_lang('ForumCategories'));
  102. $interbreadcrumb[] = array('url' => $forumUrl.'viewforumcategory.php?forumcategory='.$current_forum_category['cat_id'].'&amp;search='.Security::remove_XSS(urlencode($my_search)), 'name' => prepare4display($current_forum_category['cat_title']));
  103. $interbreadcrumb[] = array('url' => '#', 'name' => Security::remove_XSS($current_forum['forum_title']));
  104. }
  105. if ($origin == 'learnpath') {
  106. Display::display_reduced_header();
  107. } else {
  108. // The last element of the breadcrumb navigation is already set in interbreadcrumb, so give empty string.
  109. Display :: display_header('');
  110. }
  111. /* Actions */
  112. // Change visibility of a forum or a forum category.
  113. if (($my_action == 'invisible' OR $my_action=='visible') AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(false, true) && api_is_allowed_to_session_edit(false, true)) {
  114. $message = change_visibility($_GET['content'], $_GET['id'], $_GET['action']); // Note: This has to be cleaned first.
  115. }
  116. // Locking and unlocking.
  117. if (($my_action == 'lock' OR $my_action == 'unlock') AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(false, true) && api_is_allowed_to_session_edit(false, true)) {
  118. $message = change_lock_status($_GET['content'], $_GET['id'], $my_action); // Note: This has to be cleaned first.
  119. }
  120. // Deleting.
  121. if ($my_action == 'delete' AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(false, true) && api_is_allowed_to_session_edit(false, true)) {
  122. $locked = api_resource_is_locked_by_gradebook($_GET['id'], LINK_FORUM_THREAD);
  123. if ($locked == false) {
  124. $message = delete_forum_forumcategory_thread($_GET['content'], $_GET['id']); // Note: This has to be cleaned first.
  125. // Delete link
  126. require_once api_get_path(SYS_CODE_PATH).'gradebook/lib/gradebook_functions.inc.php';
  127. $link_info = is_resource_in_course_gradebook(api_get_course_id(), 5 , intval($_GET['id']), api_get_session_id());
  128. $link_id = $link_info['id'];
  129. if ($link_info !== false) {
  130. remove_resource_from_course_gradebook($link_id);
  131. }
  132. }
  133. }
  134. // Moving.
  135. if ($my_action == 'move' AND isset($_GET['thread']) AND api_is_allowed_to_edit(false, true) && api_is_allowed_to_session_edit(false, true)) {
  136. $message = move_thread_form();
  137. }
  138. // Notification.
  139. if ($my_action == 'notify' AND isset($_GET['content']) AND isset($_GET['id']) && api_is_allowed_to_session_edit(false, true)) {
  140. $return_message = set_notification($_GET['content'], $_GET['id']);
  141. Display :: display_confirmation_message($return_message, false);
  142. }
  143. // Student list
  144. if ($my_action == 'liststd' AND isset($_GET['content']) AND isset($_GET['id']) AND (api_is_allowed_to_edit(null, true) || $is_group_tutor)) {
  145. $active = null;
  146. switch ($_GET['list']) {
  147. case 'qualify':
  148. $student_list = get_thread_users_qualify($_GET['id']);
  149. $nrorow3 = -2;
  150. $active = 2;
  151. break;
  152. case 'notqualify':
  153. $student_list = get_thread_users_not_qualify($_GET['id']);
  154. $nrorow3 = -2;
  155. $active = 3;
  156. break;
  157. default:
  158. $student_list = get_thread_users_details($_GET['id']);
  159. $nrorow3 = Database::num_rows($student_list);
  160. $active = 1;
  161. break;
  162. }
  163. $table_list = Display::page_subheader(get_lang('ThreadUsersList').': '.get_name_thread_by_id($_GET['id']));
  164. if ($nrorow3 > 0 || $nrorow3 == -2) {
  165. $url = 'cidReq='.Security::remove_XSS($_GET['cidReq']).'&amp;forum='.Security::remove_XSS($my_forum).'&amp;action='.Security::remove_XSS($_GET['action']).'&amp;content='.Security::remove_XSS($_GET['content'],STUDENT).'&amp;id='.intval($_GET['id']);
  166. $tabs = array(
  167. array(
  168. 'content' => get_lang('AllStudents'),
  169. 'url' => $forumUrl.'viewforum.php?'.$url.'&amp;origin='.$origin.'&amp;list=all'
  170. ),
  171. array(
  172. 'content' => get_lang('StudentsQualified'),
  173. 'url' => $forumUrl.'viewforum.php?'.$url.'&amp;origin='.$origin.'&amp;list=qualify'
  174. ),
  175. array(
  176. 'content' => get_lang('StudentsNotQualified'),
  177. 'url' => $forumUrl.'viewforum.php?'.$url.'&amp;origin='.$origin.'&amp;list=notqualify'
  178. ),
  179. );
  180. $table_list .= Display::tabs_only_link($tabs, $active);
  181. $icon_qualify = 'blog_new.gif';
  182. $table_list .= '<center><br /><table class="data_table" style="width:50%">';
  183. // The column headers (TODO: Make this sortable).
  184. $table_list .= '<tr >';
  185. $table_list .= '<th height="24">'.get_lang('NamesAndLastNames').'</th>';
  186. if ($_GET['list'] == 'qualify') {
  187. $table_list.= '<th>'.get_lang('Qualification').'</th>';
  188. }
  189. if (api_is_allowed_to_edit(null, true)) {
  190. $table_list.= '<th>'.get_lang('Qualify').'</th>';
  191. }
  192. $table_list .= '</tr>';
  193. $max_qualify = show_qualify('2', $userid, $_GET['id']);
  194. $counter_stdlist = 0;
  195. if (Database::num_rows($student_list) > 0) {
  196. while ($row_student_list=Database::fetch_array($student_list)) {
  197. if ($counter_stdlist % 2 == 0) {
  198. $class_stdlist = 'row_odd';
  199. } else {
  200. $class_stdlist = 'row_even';
  201. }
  202. $name_user_theme = api_get_person_name($row_student_list['firstname'], $row_student_list['lastname']);
  203. $table_list .= '<tr class="'.$class_stdlist.'"><td>
  204. <a href="'.api_get_path(WEB_CODE_PATH).'user/userInfo.php?uInfo='.$row_student_list['user_id'].'&amp;tipo=sdtlist&amp;'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($my_forum).$origin_string.'">
  205. '.$name_user_theme.'</a></td>';
  206. if ($_GET['list'] == 'qualify') {
  207. $table_list .= '<td>'.$row_student_list['qualify'].'/'.$max_qualify.'</td>';
  208. }
  209. if (api_is_allowed_to_edit(null, true)) {
  210. $current_qualify_thread = show_qualify('1', $row_student_list['user_id'], $_GET['id']);
  211. $table_list .= '<td><a href="'.$forumUrl.'forumqualify.php?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($my_forum).'&amp;thread='.Security::remove_XSS($_GET['id']).'&amp;user='.$row_student_list['user_id'].'&amp;user_id='.$row_student_list['user_id'].'&amp;idtextqualify='.$current_qualify_thread.'&amp;origin='.$origin.'">'.
  212. Display::return_icon($icon_qualify, get_lang('Qualify')).'</a></td></tr>';
  213. }
  214. $counter_stdlist++;
  215. }
  216. } else {
  217. if ($_GET['list'] == 'qualify') {
  218. $table_list .= '<tr><td colspan="2">'.get_lang('ThereIsNotQualifiedLearners').'</td></tr>';
  219. } else {
  220. $table_list .= '<tr><td colspan="2">'.get_lang('ThereIsNotUnqualifiedLearners').'</td></tr>';
  221. }
  222. }
  223. $table_list .= '</table></center>';
  224. $table_list .= '<br />';
  225. } else {
  226. $table_list .= Display::return_message(get_lang('NoParticipation'), 'warning');
  227. }
  228. }
  229. if ($origin == 'learnpath') {
  230. echo '<div style="height:15px">&nbsp;</div>';
  231. }
  232. /* Display the action messages */
  233. if (!empty($message)) {
  234. Display :: display_confirmation_message($message);
  235. }
  236. /* Action links */
  237. echo '<div class="actions">';
  238. if ($origin != 'learnpath') {
  239. if ($origin=='group') {
  240. echo '<a href='.api_get_path(WEB_CODE_PATH).'"group/group_space.php?'.api_get_cidreq().'&amp;gradebook='.$gradebook.'">'.Display::return_icon('back.png',get_lang('BackTo').' '.get_lang('Groups'),'',ICON_SIZE_MEDIUM).'</a>';
  241. } else {
  242. echo '<span style="float:right;">'.search_link().'</span>';
  243. echo '<a href="'.$forumUrl.'index.php">'.Display::return_icon('back.png', get_lang('BackToForumOverview'), '', ICON_SIZE_MEDIUM).'</a>';
  244. }
  245. }
  246. // The link should appear when
  247. // 1. the course admin is here
  248. // 2. the course member is here and new threads are allowed
  249. // 3. a visitor is here and new threads AND allowed AND anonymous posts are allowed
  250. if (api_is_allowed_to_edit(false, true) OR ($current_forum['allow_new_threads'] == 1 AND isset($_user['user_id'])) OR ($current_forum['allow_new_threads'] == 1 AND !isset($_user['user_id']) AND $current_forum['allow_anonymous'] == 1)) {
  251. if ($current_forum['locked'] <> 1 AND $current_forum['locked'] <> 1) {
  252. if (!api_is_anonymous()) {
  253. if ($my_forum == strval(intval($my_forum))) {
  254. echo '<a href="'.$forumUrl.'newthread.php?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($my_forum).$origin_string.'">'.Display::return_icon('new_thread.png',get_lang('NewTopic'),'',ICON_SIZE_MEDIUM).'</a>';
  255. } else {
  256. $my_forum = strval(intval($my_forum));
  257. echo '<a href="'.$forumUrl.'newthread.php?'.api_get_cidreq().'&amp;forum='.$my_forum.$origin_string.'">'.Display::return_icon('new_thread.png',get_lang('NewTopic'),'',ICON_SIZE_MEDIUM).'</a>';
  258. }
  259. }
  260. } else {
  261. echo get_lang('ForumLocked');
  262. }
  263. }
  264. echo '</div>';
  265. /* Display */
  266. echo '<table class="forum_table" >';
  267. // The current forum
  268. if ($origin != 'learnpath') {
  269. echo '<thead><tr><th class="forum_head" colspan="7">';
  270. if (!empty ($current_forum_category['cat_title'])) {
  271. //echo '<span class="forum_low_description">'.prepare4display($current_forum_category['cat_title'])."</span><br />";
  272. }
  273. echo '<span class="forum_title">'.prepare4display($current_forum['forum_title']).'</span>';
  274. if (!empty ($current_forum['forum_comment'])) {
  275. echo '<br /><span class="forum_description">'.prepare4display($current_forum['forum_comment']).'</span>';
  276. }
  277. echo '</th></tr></thead>';
  278. }
  279. // The column headers (TODO: Make this sortable).
  280. echo '<tr class="forum_threadheader">';
  281. echo '<td></td>';
  282. echo '<td>'.get_lang('Title').'</td>';
  283. echo '<td>'.get_lang('Replies').'</td>';
  284. echo '<td>'.get_lang('Views').'</td>';
  285. echo '<td>'.get_lang('Author').'</td>';
  286. echo '<td>'.get_lang('LastPost').'</td>';
  287. echo '<td>'.get_lang('Actions').'</td>';
  288. echo '</tr>';
  289. // Getting al the threads
  290. $threads = get_threads($my_forum); // Note: This has to be cleaned first
  291. $whatsnew_post_info = isset($_SESSION['whatsnew_post_info']) ? $_SESSION['whatsnew_post_info'] : null;
  292. $course_id = api_get_course_int_id();
  293. $counter = 0;
  294. if (is_array($threads)) {
  295. foreach ($threads as $row) {
  296. // Thread who have no replies yet and the only post is invisible should not be displayed to students.
  297. if (api_is_allowed_to_edit(false, true) OR !($row['thread_replies'] == '0' AND $row['visibility'] == '0')) {
  298. if ($counter % 2 == 0) {
  299. $class = 'row_odd';
  300. } else {
  301. $class = 'row_even';
  302. }
  303. echo "<tr class=\"$class\">";
  304. echo '<td>';
  305. $my_whatsnew_post_info = isset($whatsnew_post_info[$my_forum][$row['thread_id']]) ? $whatsnew_post_info[$my_forum][$row['thread_id']] : null;
  306. if (is_array($my_whatsnew_post_info) && !empty($my_whatsnew_post_info)) {
  307. echo Display::return_icon('forumthread.gif');
  308. } else {
  309. echo Display::return_icon('forumthread.gif');
  310. }
  311. if ($row['thread_sticky'] == 1) {
  312. echo Display::return_icon('exclamation.gif');
  313. }
  314. echo '</td>';
  315. echo '<td>';
  316. echo '<a href="viewthread.php?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($my_forum).'&amp;origin='.$origin.'&amp;thread='.$row['thread_id'].$origin_string.'&amp;search='.Security::remove_XSS(urlencode($my_search)).'" '.class_visible_invisible($row['visibility']).'>'.prepare4display($row['thread_title']).'</a></td>';
  317. echo '<td>'.$row['thread_replies'].'</td>';
  318. echo '<td>'.$row['thread_views'].'</td>';
  319. // display the author name
  320. $tab_poster_info = api_get_user_info($row['user_id']);
  321. $poster_username = sprintf(get_lang('LoginX'), $tab_poster_info['username']);
  322. if ($origin != 'learnpath') {
  323. echo '<td>'.display_user_link($row['user_id'], api_get_person_name($row['firstname'], $row['lastname']), '', $poster_username).'</td>';
  324. } else {
  325. echo '<td>'.Display::tag('span', api_get_person_name($row['firstname'], $row['lastname']), array("title"=>api_htmlentities($poster_username, ENT_QUOTES))).'</td>';
  326. }
  327. $last_post_info = get_last_post_by_thread($row['c_id'], $row['thread_id'], $row['forum_id'], is_allowed_to_edit());
  328. $last_post = null;
  329. if ($last_post_info) {
  330. $poster_info = api_get_user_info($last_post_info['poster_id']);
  331. $post_date = api_convert_and_format_date($last_post_info['post_date']);
  332. $last_post = $post_date.' '.get_lang('By').' '.display_user_link($last_post_info['poster_id'], $poster_info['complete_name'], '', $poster_info['username']);
  333. }
  334. /*
  335. if ($row['last_poster_user_id'] == '0') {
  336. $name = $row['poster_name'];
  337. $last_poster_username = "";
  338. } else {
  339. $name = api_get_person_name($row['last_poster_firstname'], $row['last_poster_lastname']);
  340. $tab_last_poster_info = api_get_user_info($row['last_poster_user_id']);
  341. $last_poster_username = sprintf(get_lang('LoginX'), $tab_last_poster_info['username']);
  342. }
  343. // If the last post is invisible and it is not the teacher who is looking then we have to find the last visible post of the thread.
  344. if (($row['visible'] == '1' OR api_is_allowed_to_edit(false, true)) && $origin != 'learnpath') {
  345. $last_post = $post_date.' '.get_lang('By').' '.display_user_link($row['last_poster_user_id'], $name, '', $last_poster_username);
  346. } elseif ($origin != 'learnpath') {
  347. $last_post_sql = "SELECT post.*, user.firstname, user.lastname, user.username FROM $table_posts post, $table_users user WHERE post.poster_id=user.user_id AND visible='1' AND thread_id='".$row['thread_id']."' AND post.c_id=".api_get_course_int_id()." ORDER BY post_id DESC";
  348. $last_post_result = Database::query($last_post_sql);
  349. $last_post_row = Database::fetch_array($last_post_result);
  350. $name = api_get_person_name($last_post_row['firstname'], $last_post_row['lastname']);
  351. $last_post_info_username = sprintf(get_lang('LoginX'), $last_post_row['username']);
  352. $last_post = api_convert_and_format_date($last_post_row['post_date']).' '.get_lang('By').' '.display_user_link($last_post_row['poster_id'], $name, '', $last_post_info_username);
  353. } else {
  354. $last_post_sql = "SELECT post.*, user.firstname, user.lastname, user.username FROM $table_posts post, $table_users user WHERE post.poster_id=user.user_id AND visible='1' AND thread_id='".$row['thread_id']."' AND post.c_id=".api_get_course_int_id()." ORDER BY post_id DESC";
  355. $last_post_result = Database::query($last_post_sql);
  356. $last_post_row = Database::fetch_array($last_post_result);
  357. $last_post_info_username = sprintf(get_lang('LoginX'), $last_post_row['username']);
  358. $name = api_get_person_name($last_post_row['firstname'], $last_post_row['lastname']);
  359. $last_post = api_convert_and_format_date($last_post_row['post_date']).' '.get_lang('By').' '.Display::tag('span', $name, array("title"=>api_htmlentities($last_post_info_username, ENT_QUOTES)));
  360. }*/
  361. echo '<td>'.$last_post.'</td>';
  362. echo '<td class="td_actions">';
  363. // Get attachment id.
  364. if (isset($row['post_id'])) {
  365. $attachment_list = get_attachment($row['post_id']);
  366. }
  367. $id_attach = !empty($attachment_list) ? $attachment_list['id'] : '';
  368. $sql_post_id = "SELECT post_id FROM $table_posts WHERE c_id = $course_id AND post_title='".Database::escape_string($row['thread_title'])."'";
  369. $result_post_id = Database::query($sql_post_id);
  370. $row_post_id = Database::fetch_array($result_post_id);
  371. if ($origin != 'learnpath') {
  372. if (api_is_allowed_to_edit(false, true) && !(api_is_course_coach() && $current_forum['session_id'] != $_SESSION['id_session'])) {
  373. echo '<a href="'.$forumUrl.'editpost.php?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($my_forum).'&amp;thread='.Security::remove_XSS($row['thread_id']).'&amp;post='.$row_post_id['post_id'].'&id_attach='.$id_attach.'">'.
  374. Display::return_icon('edit.png', get_lang('Edit'), array(), ICON_SIZE_SMALL).'</a>';
  375. if (api_resource_is_locked_by_gradebook($row['thread_id'], LINK_FORUM_THREAD)) {
  376. echo Display::return_icon('delete_na.png', get_lang('ResourceLockedByGradebook'), array(), ICON_SIZE_SMALL);
  377. } else {
  378. echo '<a href="'.api_get_self().'?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($my_forum).'&amp;action=delete&amp;content=thread&id='.$row['thread_id'].$origin_string."\" onclick=\"javascript:if(!confirm('".addslashes(api_htmlentities(get_lang('DeleteCompleteThread'), ENT_QUOTES))."')) return false;\">".
  379. Display::return_icon('delete.png', get_lang('Delete'), array(), ICON_SIZE_SMALL).'</a>';
  380. }
  381. display_visible_invisible_icon('thread', $row['thread_id'], $row['visibility'], array('forum' => $my_forum, 'origin' => $origin, 'gidReq' => $groupId));
  382. display_lock_unlock_icon('thread', $row['thread_id'], $row['locked'], array('forum' => $my_forum, 'origin' => $origin, 'gidReq' => api_get_group_id()));
  383. echo '<a href="viewforum.php?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($my_forum).'&amp;action=move&thread='.$row['thread_id'].$origin_string.'">'.
  384. Display::return_icon('move.png', get_lang('MoveThread'), array(), ICON_SIZE_SMALL).'</a>';
  385. }
  386. }
  387. $iconnotify = 'send_mail.gif';
  388. if (is_array(isset($_SESSION['forum_notification']['thread']) ? $_SESSION['forum_notification']['thread'] : null)) {
  389. if (in_array($row['thread_id'], $_SESSION['forum_notification']['thread'])) {
  390. $iconnotify = 'send_mail_checked.gif';
  391. }
  392. }
  393. $icon_liststd = 'user.png';
  394. if (!api_is_anonymous() && api_is_allowed_to_session_edit(false, true)) {
  395. echo '<a href="'.api_get_self().'?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($my_forum).'&amp;origin='.$origin.'&amp;action=notify&amp;content=thread&id='.$row['thread_id'].'">'.
  396. Display::return_icon($iconnotify, get_lang('NotifyMe')).'</a>';
  397. }
  398. if (api_is_allowed_to_edit(null,true) && $origin != 'learnpath') {
  399. echo '<a href="'.api_get_self().'?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($my_forum).'&amp;origin='.$origin.'&amp;action=liststd&amp;content=thread&id='.$row['thread_id'].'">'.
  400. Display::return_icon($icon_liststd,get_lang('StudentList'), array(), ICON_SIZE_SMALL).'</a>';
  401. }
  402. echo '</td></tr>';
  403. }
  404. $counter++;
  405. }
  406. }
  407. echo '</table>';
  408. echo isset($table_list) ? $table_list : '';
  409. /* FOOTER */
  410. if ($origin != 'learnpath') {
  411. Display :: display_footer();
  412. }